CVE-2026-45353

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

Score

CVSS 4.0 9.3 Critical

Status

Analyzed - security-advisories@github.com

Published

2026-05-28

Last modified

2026-05-28

Weaknesses

CWE-732, CWE-94, CWE-940

Affected products

• Electerm (Electerm)
• Electerm (Electerm Project)

References

• https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507
• https://github.com/electerm/electerm/security/advisories/GHSA-7p5m-v798-f8vv